CVE-2018-5864

CVE-2018-5864 maps to a Qualcomm WMA information-disclosure vulnerability affecting Android devices (Pixel/Nexus) prior to the 2018-07-05 patch level. The issue arises during processing of WMI_APFIND events in CAF/Linux kernel-based Android builds, causing a potential buffer over-read and informa...

CVE-2018-5873

The CVE-2018-5873 entry refers to a race-condition induced Use-After-Free in the Linux kernel before 4.11, specifically in __ns_get_path within fs/nsfs.c. This affects the mainline Linux kernel and Android builds derived from CAF for Android kernels (Android for MSM, Firefox OS for MSM, QRD Andro...

CVE-2018-5859

CVE-2018-5859 describes a race-condition–driven use-after-free in the MDSS MDP driver used by CAF Android builds on the Linux kernel, prior to the 2018-07-05 patch level. The issue can trigger a Use After Free condition on affected devices (Android for MSM, Firefox OS for MSM, QRD Android). Affec...

CVE-2018-5855

While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, a buffer over-read can potentially occur...

CVE-2018-5853

CVE-2018-5853 describes a race condition in a driver used by CAF Android for MSM (Linux kernel variants) including Android for MSM, Firefox OS for MSM, and QRD Android. The issue potentially leads to a use-after-free condition. Impact details in the provided sources indicate local attack requirem...

CVE-2018-5862

CVE-2018-5862 concerns Android CAF builds using the Linux kernel. In __wlan_hdd_cfg80211_vendor_scan(), when parsing SCAN_SSIDS and QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES, a buffer overwrite can potentially occur in all Android releases before patch level 2018-07-05. CVSS data in the entry shows l...

CVE-2018-5907

Possible buffer overflow in msmadspstreamcallbackput due to lack of input validation of user-provided data that leads to integer overflow in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5855

CVE-2018-5855 affects Qualcomm WLAN Host components within Android CAF builds. The issue arises from padding/shrinking a nested WMI packet, potentially causing a buffer over-read in all CAF Android releases prior to the patched level. According to the CVE entry, this is rated critical (CVSS v3: 9...

CVE-2018-5858

In the audio debugfs in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, out of bounds access can occur...

CVE-2018-3570

In the cpuidle driver in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel, the listforeach macro was not used correctly which could lead to an untrusted pointer dereference...

CVE-2018-5858

CVE-2018-5858 concerns an out-of-bounds access in the audio debugfs for Android CAF builds using the Linux kernel, affecting Android for MSM, Firefox OS for MSM, and QRD Android prior to the 2018-07-05 security patch level. The issue is triggered via the audio debugfs component of the kernel, wit...

CVE-2018-11304

CVE-2018-11304 describes a possible buffer overflow in msm_adsp_stream_callback_put caused by insufficient input validation of user-provided data, leading to an integer overflow across CAF-powered Android releases (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux kernel. The vuln...

CVE-2018-3587

CVE-2018-3587 is tied to the Qualcomm qcacld-2.0 WLAN driver in Android CAF builds, where a Use-After-Free in a firmware memory dump feature can lead to Elevation of Privilege (EoP). The NVD listing shows a CVSS v3 base score of 7.8 (HIGH) with LOCAL attack vector, low complexity, and privileges ...

CVE-2018-5886

A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, which can lead to kernel memory being accessed...

CVE-2018-3570

CVE-2018-3570 refers to a vulnerability in the cpuidle driver used by CAF Android builds (Android for MSM, Firefox OS for MSM, QRD Android) that rely on the Linux kernel. The issue arises from incorrect use of the list_for_each macro, which could lead to an untrusted pointer dereference. Connecte...

CVE-2018-5872

CVE-2018-5872 affects Qualcomm WLAN (qca-wifi-host-cmn) in Android CAF releases. The issue arises from missing length checks on Beacon Information Elements, enabling a nearby attacker to cause a buffer overread and potentially execute arbitrary code in a privileged process. Android’s 2018-07-05 p...

CVE-2018-3587

In a firmware memory dump feature in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, a Use After Free condition can occur...

CVE-2018-5893

While processing a message from firmware in httt2hmsghandlerfast in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a buffer overwrite can occur...

CVE-2018-5897

While reading the data from buffer in dciprocessctrlstatus there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-5898

Integer overflow can occur in msmpcmadspstreamcmdput function if the user supplied data "paramlength" goes beyond certain limit in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...